{"report_id":"8ce19b39-11ba-460c-8577-d8751093b68e","version":0,"status":"done","tags":[],"date":"2026-09-11T10:08:23Z","url":{"schema":"http","addr":"uspsstampstogo.com/","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"uspsstampstogo.com/","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"title":"USPS Stamps To Go: Join us to Sell U.S. Postage Stamps - USPS Stamps to Go","dom":{"size":29794,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17359)","md5":"7331aac0ac572ae2b1eb139b3136ef56","sha1":"f62f22332c6caabf0152e709421291f61d59c801","sha256":"4469901d5ba8bb28366ba79bcd1f5a7962549059c497e21f008ba31c0b80d0de","sha512":"bfd8680edf3009c743777016f722d3635daaadc3e5385f52330af613e5cf03808f3217ce9f5d78e709b6117e71e1456dd3b9eec69e98108e5f0ea0048f67e4d8","ssdeep":"384:SRKA6a+uQRON5dpT552sI4jhDyS9W2UcaCkXkhzTIXeKZtHGhX+V:kKA6a+X8NTzkajES82UcaZUmD3HGhX+V","tlshash":"60d2d7a4b0b39831079b5718685b1a1eb17ab61ba44edcf0fbf8d4941fb698d0017f2d","dom_hash":"domhash2c0107c5b6bde0fa2a16cbd1dd55dce8","first_seen":"2026-09-11T08:06:47.069036Z","last_seen":"2026-09-11T10:08:23.932751Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"uspsstampstogo.com/","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T10:08:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"uspsstampstogo.com","ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2001-02-07","domain_rank":0,"first_seen":"2026-09-11T08:06:45.092623Z","last_seen":"2026-09-11T08:06:45.092623Z","alert_count":33,"request_count":11,"received_data":497170,"sent_data":12743,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":6147,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/_plugin-vue_export-helper.cdc0426e.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-09-11T13:52:45.683349Z","times_seen":26525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/FlashMessages.41be08f1.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c19e03249fed21040951d281b9f6dc7","sha1":"f08bfa87e6268dd615bdfbf44b6f8ca9958d8750","sha256":"321f6e24f47885b7d4dc079f63f7d9e143c7c11b0917e877d7f83a5293522281","sha512":"6d86d2c4ad5a237b24bed1138b0171fa5da27bbfbf4672242c708550e9d2d5842d9c64648076ce06dac90a0703af74f87640ab9252f96f57808e6f51f7298b0d","ssdeep":"","tlshash":"7131511e162bcead425f40a058bb3c4c135cdb8be563cbe394adc034294b8e5b106914","size":1807,"data":"","first_seen":"2026-09-11T08:06:46.905509Z","last_seen":"2026-09-11T10:08:23.933479Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/Welcome.7caba7cd.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68f83a500e5c2747cc643dc349a4f05d","sha1":"f89d98ade2844be8791562a23471ee6a7268f1d5","sha256":"b9a22b3a5b612327ec80df447ff5932c02b0419e24e30d1f1ba2dd890c1876c6","sha512":"0ae80ee82649a1ae613b19cf7f026c1e0c1c9cfc0ebf2fd6b56b09cbd20f6d25bf5baedb7cc528ce466ebc507639a9fa16573a9b183acf522aa4799286a424f4","ssdeep":"","tlshash":"e261d668e4298b3ad25309b1b6eb3d507004579ac631cd2b77f945663fd08acee19374","size":3346,"data":"","first_seen":"2026-09-11T08:06:46.897684Z","last_seen":"2026-09-11T10:08:23.934802Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/LoadingButton.118b5462.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"92c20ca505cdb78e849f325c55758307","sha1":"44b283fb66ad60cc7c248cec1765916e981c212e","sha256":"998c1bb7751a97b7588ba5d34b0208e285004b486878f49d6c20414e27ab3f41","sha512":"5c75689e963103bca69a99e4571c20772b934045596155c6f54b3a084617fcdcc9a02525af49b2473f07480a37d18253a3d372906cbd577eec93487c7b065de9","ssdeep":"","tlshash":"5ee02b0ab411943826639cac80397000f3287ca8339869cb40a461bbfb1b04b2128eb1","size":430,"data":"","first_seen":"2026-09-11T08:06:46.898828Z","last_seen":"2026-09-11T10:08:23.940577Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a2f421e5e17f79b1ad54846a1cc9746","sha1":"897885f8a1fbd12e0994a7cbb7368dc4b1e28ed5","sha256":"a561c2d757e94f8bed9a3e1d9b140c6f69607d8e22ee91122cc26cdfe83c4067","sha512":"a88b464675b2c21766fc6680d1d93f6f5423dd137b5aa4cacdeca14fe7df3e9cf2ebc12716e1d2dbfa1711292d80fe883a0eaaadcf23d64dcba678dc991a04db","ssdeep":"384:MKA6a+uQRON5dpT552sI4jhDyS9W2UcaCkXkhzTIXZ:MKA6a+X8NTzkajES82UcaZUmZ","tlshash":"f8a2a598b4a7d8304be75318681b091eb17db92ab44e9cf0fbf0d8e55cba58d4017b2d","size":22895,"data":"","first_seen":"2026-09-11T08:06:47.080014Z","last_seen":"2026-09-11T10:08:23.941361Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/app.2d731ac3.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57d6bedb8624b6ac9eea6bb9a07d6e2f","sha1":"6649cdfa5d882e45faea8a98769a52b5818ce7fd","sha256":"fedf8bbeafa2df21de03e3c084c413e0300ece43c6035bd7565894e44838d095","sha512":"344e2763bc2a860f8b0294f0e879cafd4af7e4261e9c6d373cdf95da1c745ee4d3d23288712fc922743885d9b83ba8f739c32c90388248ef76708c68cae4cc41","ssdeep":"6144:iWZ5bOUmCeAOdiY6E2WKH09D0RLJFI/Le+t+Zuxv:H52nAsiY0WKID0ZJFEyDZuJ","tlshash":"e17409d87593b46183a728f000bf044bf23d6e25a84cd494f169e8e93eb99198277f7d","size":339786,"data":"","first_seen":"2026-09-11T08:06:46.896045Z","last_seen":"2026-09-11T10:08:23.939058Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/AppLayout.9a2ddd55.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"25c9a4d4ac23259aa995d15d00b5ff2c","sha1":"5752cb5c9adda60e9dd0f51988cb7868937f421c","sha256":"5f1d081bd2085f6d8a9a394dfeef2b5024ee5788c4a1afe896e3808f2e1cba0b","sha512":"6b2de2a753b7af247353f93e799f83a3c312da01d2654524b4859ddf0b7e454768a1f1685f9300cd96f629f2f52981a24c9c7e67635216b0cc5dfc6e74e65838","ssdeep":"","tlshash":"1b81b50ea614c93dfa73086964a53614241e7fe6e03d95eaf2fe40343b50e78b7263b4","size":3977,"data":"","first_seen":"2026-09-11T08:06:46.904382Z","last_seen":"2026-09-11T10:08:23.939964Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/FlashMessages.41be08f1.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uspsstampstogo.com/","date":"2026-09-11T10:07:54.258Z","timestamp":1789121274258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.uspsstampstogo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 03:11:10 GMT","end":"Wed, 11 Nov 2026 03:11:09 GMT"},"fingerprint":{"sha1":"62:6B:60:1C:EA:97:47:12:3D:AC:5E:18:E8:30:E0:FC:E6:7A:FD:82","sha256":"CA:B9:45:0D:2B:17:E2:60:B5:D0:1F:39:58:AF:20:50:52:1F:CC:D0:75:9E:0F:E5:DA:C5:D3:46:48:0B:C8:E9"}}},"request":{"raw":"GET /build/assets/FlashMessages.41be08f1.js HTTP/1.1\r\nHost: uspsstampstogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uspsstampstogo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; usps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Fri, 12 Dec 2025 16:45:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1807\r\ncontent-type: application/javascript\r\ndate: Fri, 11 Sep 2026 10:07:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1807,"size_decoded":2087,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1806)","md5":"7c19e03249fed21040951d281b9f6dc7","sha1":"f08bfa87e6268dd615bdfbf44b6f8ca9958d8750","sha256":"321f6e24f47885b7d4dc079f63f7d9e143c7c11b0917e877d7f83a5293522281","sha512":"6d86d2c4ad5a237b24bed1138b0171fa5da27bbfbf4672242c708550e9d2d5842d9c64648076ce06dac90a0703af74f87640ab9252f96f57808e6f51f7298b0d","ssdeep":"","tlshash":"7131511e162bcead425f40a058bb3c4c135cdb8be563cbe394adc034294b8e5b106914","first_seen":"2026-09-11T08:06:46.905509Z","last_seen":"2026-09-11T10:08:23.933479Z","times_seen":6,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T10:07:51.958Z","timestamp":1789121271958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.uspsstampstogo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 03:11:10 GMT","end":"Wed, 11 Nov 2026 03:11:09 GMT"},"fingerprint":{"sha1":"62:6B:60:1C:EA:97:47:12:3D:AC:5E:18:E8:30:E0:FC:E6:7A:FD:82","sha256":"CA:B9:45:0D:2B:17:E2:60:B5:D0:1F:39:58:AF:20:50:52:1F:CC:D0:75:9E:0F:E5:DA:C5:D3:46:48:0B:C8:E9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: uspsstampstogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.1.34\r\ncache-control: no-cache, private\r\ndate: Fri, 11 Sep 2026 10:07:52 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; expires=Fri, 11 Sep 2026 12:07:53 GMT; Max-Age=7200; path=/; samesite=lax\nusps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D; expires=Fri, 11 Sep 2026 12:07:53 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-11T12:07:53Z","raw_expires":"Fri, 11 Sep 2026 12:07:53 GMT","max_age":7200,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; expires=Fri, 11 Sep 2026 12:07:53 GMT; Max-Age=7200; path=/; samesite=lax"},{"name":"usps_stamps_to_go_session","value":"eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-11T12:07:53Z","raw_expires":"Fri, 11 Sep 2026 12:07:53 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"usps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D; expires=Fri, 11 Sep 2026 12:07:53 GMT; Max-Age=7200; path=/; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24965,"size_decoded":26113,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (17359)","md5":"9e90f3aefc30562fbcd61a0908cfee13","sha1":"c86b8cf37b81eac46bbe4d629385ec6f8482b1c5","sha256":"fa206a802a12ec3758914f3e22ce06617d3b53f8545d281ad744f9fb7ce87295","sha512":"f7b7edfac292e9cf38b6e78d38982c51099c265ab28d147c95a0655124e546196a32720a175c22c80c140918cdf676b945759b532bfc3013b362a3e4bf38ed8a","ssdeep":"384:dRKA6a+uQRON5dpT552sI4jhDyS9W2UcaCkXkhzTIXqKZv:zKA6a+X8NTzkajES82UcaZUmHp","tlshash":"03b2b794f4b7d830079b6318681b1a1eb17eba2bb18d9cf0fbf0d4951dba58d4017a2d","first_seen":"2026-09-11T08:06:47.077102Z","last_seen":"2026-09-11T10:08:23.934061Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":-1,"dns":350,"connect":111,"send":0,"wait":714,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/Welcome.7caba7cd.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uspsstampstogo.com/","date":"2026-09-11T10:07:54.251Z","timestamp":1789121274251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.uspsstampstogo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 03:11:10 GMT","end":"Wed, 11 Nov 2026 03:11:09 GMT"},"fingerprint":{"sha1":"62:6B:60:1C:EA:97:47:12:3D:AC:5E:18:E8:30:E0:FC:E6:7A:FD:82","sha256":"CA:B9:45:0D:2B:17:E2:60:B5:D0:1F:39:58:AF:20:50:52:1F:CC:D0:75:9E:0F:E5:DA:C5:D3:46:48:0B:C8:E9"}}},"request":{"raw":"GET /build/assets/Welcome.7caba7cd.js HTTP/1.1\r\nHost: uspsstampstogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uspsstampstogo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; usps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Fri, 12 Dec 2025 16:45:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3346\r\ncontent-type: application/javascript\r\ndate: Fri, 11 Sep 2026 10:07:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3346,"size_decoded":3626,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3345)","md5":"68f83a500e5c2747cc643dc349a4f05d","sha1":"f89d98ade2844be8791562a23471ee6a7268f1d5","sha256":"b9a22b3a5b612327ec80df447ff5932c02b0419e24e30d1f1ba2dd890c1876c6","sha512":"0ae80ee82649a1ae613b19cf7f026c1e0c1c9cfc0ebf2fd6b56b09cbd20f6d25bf5baedb7cc528ce466ebc507639a9fa16573a9b183acf522aa4799286a424f4","ssdeep":"","tlshash":"e261d668e4298b3ad25309b1b6eb3d507004579ac631cd2b77f945663fd08acee19374","first_seen":"2026-09-11T08:06:46.897684Z","last_seen":"2026-09-11T10:08:23.934802Z","times_seen":6,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/_plugin-vue_export-helper.cdc0426e.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uspsstampstogo.com/","date":"2026-09-11T10:07:54.257Z","timestamp":1789121274257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.uspsstampstogo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 03:11:10 GMT","end":"Wed, 11 Nov 2026 03:11:09 GMT"},"fingerprint":{"sha1":"62:6B:60:1C:EA:97:47:12:3D:AC:5E:18:E8:30:E0:FC:E6:7A:FD:82","sha256":"CA:B9:45:0D:2B:17:E2:60:B5:D0:1F:39:58:AF:20:50:52:1F:CC:D0:75:9E:0F:E5:DA:C5:D3:46:48:0B:C8:E9"}}},"request":{"raw":"GET /build/assets/_plugin-vue_export-helper.cdc0426e.js HTTP/1.1\r\nHost: uspsstampstogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uspsstampstogo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; usps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Fri, 12 Dec 2025 16:45:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91\r\ncontent-type: application/javascript\r\ndate: Fri, 11 Sep 2026 10:07:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":91,"size_decoded":369,"mime_type":"application/javascript","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-09-11T13:52:45.683349Z","times_seen":26525,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/favicon.ico","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uspsstampstogo.com/","date":"2026-09-11T10:07:54.390Z","timestamp":1789121274390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.uspsstampstogo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 03:11:10 GMT","end":"Wed, 11 Nov 2026 03:11:09 GMT"},"fingerprint":{"sha1":"62:6B:60:1C:EA:97:47:12:3D:AC:5E:18:E8:30:E0:FC:E6:7A:FD:82","sha256":"CA:B9:45:0D:2B:17:E2:60:B5:D0:1F:39:58:AF:20:50:52:1F:CC:D0:75:9E:0F:E5:DA:C5:D3:46:48:0B:C8:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: uspsstampstogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uspsstampstogo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; usps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Fri, 14 Jun 2024 06:30:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 0\r\ncontent-type: image/x-icon\r\ndate: Fri, 11 Sep 2026 10:07:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":267,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T15:24:32.699159Z","times_seen":18405136,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/mast.90ef1b37.png","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uspsstampstogo.com/","date":"2026-09-11T10:07:54.416Z","timestamp":1789121274416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.uspsstampstogo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 03:11:10 GMT","end":"Wed, 11 Nov 2026 03:11:09 GMT"},"fingerprint":{"sha1":"62:6B:60:1C:EA:97:47:12:3D:AC:5E:18:E8:30:E0:FC:E6:7A:FD:82","sha256":"CA:B9:45:0D:2B:17:E2:60:B5:D0:1F:39:58:AF:20:50:52:1F:CC:D0:75:9E:0F:E5:DA:C5:D3:46:48:0B:C8:E9"}}},"request":{"raw":"GET /build/assets/mast.90ef1b37.png HTTP/1.1\r\nHost: uspsstampstogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uspsstampstogo.com/build/assets/app.515cd159.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; usps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Fri, 12 Dec 2025 16:45:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49255\r\ncontent-type: image/png\r\ndate: Fri, 11 Sep 2026 10:07:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49255,"size_decoded":49523,"mime_type":"image/png","magic":"PNG image data, 743 x 182, 8-bit/color RGBA, non-interlaced","md5":"209b30df5a1fda2cdb668e62221115b9","sha1":"513ad9e6ae00daa1cbf18f85011dfb282979fcd3","sha256":"90ef1b372fb2fcfbafa88974d65b2bbe6af4bec710d16416faba2c3ff0559c28","sha512":"f040856da59a51327d081d149507aba0704fabc319c2454f2f44da936ebaf68c902a83f9ed28189a34d53fc5eb105f82b752a7c00d5fc33a2c1feacaf56feb5a","ssdeep":"768:3KstCwQMWrf+3wsTE1/f4CVNKU/vuqrmGVpdZw2QNIyhqwa8qbhZGME4qlYdaYH:btCEWrf+3wsI2lodfWqbbNOlN4","tlshash":"5823f0c830bec22d9dd3112b13201ebad1eb663e605204d4995aeddc2deb5d01e7629f","first_seen":"2026-09-11T08:06:46.900373Z","last_seen":"2026-09-11T10:08:23.93647Z","times_seen":6,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/buy_stamps.a2550595.png","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uspsstampstogo.com/","date":"2026-09-11T10:07:54.419Z","timestamp":1789121274419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.uspsstampstogo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 03:11:10 GMT","end":"Wed, 11 Nov 2026 03:11:09 GMT"},"fingerprint":{"sha1":"62:6B:60:1C:EA:97:47:12:3D:AC:5E:18:E8:30:E0:FC:E6:7A:FD:82","sha256":"CA:B9:45:0D:2B:17:E2:60:B5:D0:1F:39:58:AF:20:50:52:1F:CC:D0:75:9E:0F:E5:DA:C5:D3:46:48:0B:C8:E9"}}},"request":{"raw":"GET /build/assets/buy_stamps.a2550595.png HTTP/1.1\r\nHost: uspsstampstogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uspsstampstogo.com/build/assets/app.515cd159.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; usps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Fri, 12 Dec 2025 16:45:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18670\r\ncontent-type: image/png\r\ndate: Fri, 11 Sep 2026 10:07:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18670,"size_decoded":18938,"mime_type":"image/png","magic":"PNG image data, 340 x 227, 8-bit colormap, non-interlaced","md5":"f4ad3ebe8e3b11cb17640b38be73e8f8","sha1":"952ef543f949edf1d1dbea084be6378969bac9e8","sha256":"a2550595c6e873b2e368ffd430842f26294c954824fefef22b2400890d7508c9","sha512":"2ca8df1b58eba0f0962582201d2ebf556bdaa8114ed7b94d5c541a8ad7e3928cf27e0040e79630f9f290dbd4d9b92ee3b5f26225227fbd4d7bce85847fa9dc7d","ssdeep":"384:DVu7kKm45EJ8hveMle3CMWUpAAlGBVge7giReQwLtAby2DykXG1L+1:47bdvveM43dAAEoe79ReVLtAbSZG","tlshash":"e782d0d5637b94ae86900d199c276f9cea82dd6e5eef86841024f0390df37075287f26","first_seen":"2026-09-11T08:06:46.893168Z","last_seen":"2026-09-11T10:08:23.937084Z","times_seen":6,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uspsstampstogo.com/","date":"2026-09-11T10:07:53.608Z","timestamp":1789121273608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uspsstampstogo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 11 Sep 2026 10:07:53 GMT\r\ndate: Fri, 11 Sep 2026 10:07:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":1291,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-09-11T15:54:23.502999Z","times_seen":1902,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/app.515cd159.css","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uspsstampstogo.com/","date":"2026-09-11T10:07:53.611Z","timestamp":1789121273611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.uspsstampstogo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 03:11:10 GMT","end":"Wed, 11 Nov 2026 03:11:09 GMT"},"fingerprint":{"sha1":"62:6B:60:1C:EA:97:47:12:3D:AC:5E:18:E8:30:E0:FC:E6:7A:FD:82","sha256":"CA:B9:45:0D:2B:17:E2:60:B5:D0:1F:39:58:AF:20:50:52:1F:CC:D0:75:9E:0F:E5:DA:C5:D3:46:48:0B:C8:E9"}}},"request":{"raw":"GET /build/assets/app.515cd159.css HTTP/1.1\r\nHost: uspsstampstogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uspsstampstogo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; usps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Fri, 12 Dec 2025 16:45:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 50946\r\ncontent-type: text/css\r\ndate: Fri, 11 Sep 2026 10:07:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50946,"size_decoded":51213,"mime_type":"text/css","magic":"ASCII text, with very long lines (50945)","md5":"b1a5a518924af27d7d919f58fc389f60","sha1":"33e71b353dbed45408dac3aeb38ed85578fd281b","sha256":"515cd159a2a0846ada1a7d666089b618056156eaff356d9fe446e76fb45dcb0e","sha512":"dd87389e414939d7e0e8c452c8da630154499dc6b7911604aba8802de669a7243915c68652b5a1eff96e6b91539bf9c0b1a6bd346c85f11f1a1cacf5de60eed6","ssdeep":"384:5RkSkwQKyBMRyBAMMq5PxFPkWwl4/sVNg2paRNjwIcafeZNjufyCBgn:Ln4/eg2azca2ZNjV","tlshash":"3433b42ee711113e3c23c6f5d148a49d7a1672d1dfba47eaeca26110cfc67a30d57928","first_seen":"2026-09-11T08:06:46.902981Z","last_seen":"2026-09-11T10:08:23.938535Z","times_seen":6,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/app.2d731ac3.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uspsstampstogo.com/","date":"2026-09-11T10:07:53.612Z","timestamp":1789121273612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.uspsstampstogo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 03:11:10 GMT","end":"Wed, 11 Nov 2026 03:11:09 GMT"},"fingerprint":{"sha1":"62:6B:60:1C:EA:97:47:12:3D:AC:5E:18:E8:30:E0:FC:E6:7A:FD:82","sha256":"CA:B9:45:0D:2B:17:E2:60:B5:D0:1F:39:58:AF:20:50:52:1F:CC:D0:75:9E:0F:E5:DA:C5:D3:46:48:0B:C8:E9"}}},"request":{"raw":"GET /build/assets/app.2d731ac3.js HTTP/1.1\r\nHost: uspsstampstogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uspsstampstogo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; usps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Fri, 12 Dec 2025 16:45:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 339786\r\ncontent-type: application/javascript\r\ndate: Fri, 11 Sep 2026 10:07:53 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":339786,"size_decoded":340068,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38615)","md5":"57d6bedb8624b6ac9eea6bb9a07d6e2f","sha1":"6649cdfa5d882e45faea8a98769a52b5818ce7fd","sha256":"fedf8bbeafa2df21de03e3c084c413e0300ece43c6035bd7565894e44838d095","sha512":"344e2763bc2a860f8b0294f0e879cafd4af7e4261e9c6d373cdf95da1c745ee4d3d23288712fc922743885d9b83ba8f739c32c90388248ef76708c68cae4cc41","ssdeep":"6144:iWZ5bOUmCeAOdiY6E2WKH09D0RLJFI/Le+t+Zuxv:H52nAsiY0WKID0ZJFEyDZuJ","tlshash":"e17409d87593b46183a728f000bf044bf23d6e25a84cd494f169e8e93eb99198277f7d","first_seen":"2026-09-11T08:06:46.896045Z","last_seen":"2026-09-11T10:08:23.939058Z","times_seen":6,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/AppLayout.9a2ddd55.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uspsstampstogo.com/","date":"2026-09-11T10:07:54.253Z","timestamp":1789121274253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.uspsstampstogo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 03:11:10 GMT","end":"Wed, 11 Nov 2026 03:11:09 GMT"},"fingerprint":{"sha1":"62:6B:60:1C:EA:97:47:12:3D:AC:5E:18:E8:30:E0:FC:E6:7A:FD:82","sha256":"CA:B9:45:0D:2B:17:E2:60:B5:D0:1F:39:58:AF:20:50:52:1F:CC:D0:75:9E:0F:E5:DA:C5:D3:46:48:0B:C8:E9"}}},"request":{"raw":"GET /build/assets/AppLayout.9a2ddd55.js HTTP/1.1\r\nHost: uspsstampstogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uspsstampstogo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; usps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Fri, 12 Dec 2025 16:45:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3977\r\ncontent-type: application/javascript\r\ndate: Fri, 11 Sep 2026 10:07:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3977,"size_decoded":4257,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3976)","md5":"25c9a4d4ac23259aa995d15d00b5ff2c","sha1":"5752cb5c9adda60e9dd0f51988cb7868937f421c","sha256":"5f1d081bd2085f6d8a9a394dfeef2b5024ee5788c4a1afe896e3808f2e1cba0b","sha512":"6b2de2a753b7af247353f93e799f83a3c312da01d2654524b4859ddf0b7e454768a1f1685f9300cd96f629f2f52981a24c9c7e67635216b0cc5dfc6e74e65838","ssdeep":"","tlshash":"1b81b50ea614c93dfa73086964a53614241e7fe6e03d95eaf2fe40343b50e78b7263b4","first_seen":"2026-09-11T08:06:46.904382Z","last_seen":"2026-09-11T10:08:23.939964Z","times_seen":6,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uspsstampstogo.com/build/assets/LoadingButton.118b5462.js","fqdn":"uspsstampstogo.com","domain":"uspsstampstogo.com","tld":"com"},"ip":{"addr":"18.218.239.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uspsstampstogo.com/","date":"2026-09-11T10:07:54.255Z","timestamp":1789121274255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dev.uspsstampstogo.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 03:11:10 GMT","end":"Wed, 11 Nov 2026 03:11:09 GMT"},"fingerprint":{"sha1":"62:6B:60:1C:EA:97:47:12:3D:AC:5E:18:E8:30:E0:FC:E6:7A:FD:82","sha256":"CA:B9:45:0D:2B:17:E2:60:B5:D0:1F:39:58:AF:20:50:52:1F:CC:D0:75:9E:0F:E5:DA:C5:D3:46:48:0B:C8:E9"}}},"request":{"raw":"GET /build/assets/LoadingButton.118b5462.js HTTP/1.1\r\nHost: uspsstampstogo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://uspsstampstogo.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IndBUmh2MmwrdGZremN3V3lxdlppU0E9PSIsInZhbHVlIjoia283MVEzRGkvWjJLUDZGV2FxMXpia2c0L1d6VzhCdkVhTHo0U3dNbXR2b05PMjVVa2hNcSszQ0V1Q0RpZDluL3QzVkVSU2pqT3lwUGVuR0dpSmU4S0VVdDZSbEI1by8wdTZuaGplbnJhc1BXN2RGV0xnUXZrdWlENUVadC9Ud1ciLCJtYWMiOiJmOTRiOTViNjhhZDFhMWM0MTI3Nzk2NzgzNTJjYTA5ZDQwMTBlMjRlMTMxN2E0ZTZhNjI4MGQ2MDJjZjZlZjQ4IiwidGFnIjoiIn0%3D; usps_stamps_to_go_session=eyJpdiI6IkxLbmhOdXE1YWxDck5PcFdsZzVhQVE9PSIsInZhbHVlIjoialY3elFpVXRnQVd0N0JmQWdNR01uZXlIcW81dG1ITkFEdi9wYlhFRE5jeVEralFoeFdzeVVJWGh4U2wyMUIxQzR2cmJpUWd2eTZwNDA2eGxvWHBHSWpZTjBlc2IwM1l1L3hBc0Q0eVpsVTg5N0c1VmFvSEZ3ME5ENFVoMUZYeHciLCJtYWMiOiIzYzFhMjNmZDc1M2RjYmIxMzJhZjk2ZjhjNzU2OGVjMzcyYjYzMjY0ZjU0YjNlYTE5NTFiMmFhYmI5NzRjZTRiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Fri, 12 Dec 2025 16:45:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 430\r\ncontent-type: application/javascript\r\ndate: Fri, 11 Sep 2026 10:07:54 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":430,"size_decoded":709,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (429)","md5":"92c20ca505cdb78e849f325c55758307","sha1":"44b283fb66ad60cc7c248cec1765916e981c212e","sha256":"998c1bb7751a97b7588ba5d34b0208e285004b486878f49d6c20414e27ab3f41","sha512":"5c75689e963103bca69a99e4571c20772b934045596155c6f54b3a084617fcdcc9a02525af49b2473f07480a37d18253a3d372906cbd577eec93487c7b065de9","ssdeep":"","tlshash":"5ee02b0ab411943826639cac80397000f3287ca8339869cb40a461bbfb1b04b2128eb1","first_seen":"2026-09-11T08:06:46.898828Z","last_seen":"2026-09-11T10:08:23.940577Z","times_seen":6,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"uspsstampstogo.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"uspsstampstogo.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}